Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/ysDQnSxFbxcbpvS2DGXUYIFNWUI.roa
File:                     ysDQnSxFbxcbpvS2DGXUYIFNWUI.roa (raw, json)
Hash identifier:          pcnIKMsuhw5kK0M8BnairDwAl1GIPCWqhC5CB05NpD4=
Subject key identifier:   CA:C0:D0:9D:2C:45:6F:17:1B:A6:F4:B6:0C:65:D4:60:81:4D:59:42
Certificate issuer:       /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial:       0519
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ysDQnSxFbxcbpvS2DGXUYIFNWUI.roa
Signing time:             Mon 25 Sep 2023 10:15:29 +0000
ROA not before:           Mon 25 Sep 2023 10:15:29 +0000
ROA not after:            Tue 24 Sep 2024 02:11:20 +0000
asID:                     35913
IP address blocks:        123.98.68.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1305 (0x519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
        Validity
            Not Before: Sep 25 10:15:29 2023 GMT
            Not After : Sep 24 02:11:20 2024 GMT
        Subject: CN=CAC0D09D2C456F171BA6F4B60C65D460814D5942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:30:6f:f8:28:28:b9:2d:26:c9:ee:fa:e6:
                    de:29:9f:b8:70:25:74:de:0d:15:89:94:6e:c8:f8:
                    23:aa:c5:ad:f7:a6:f2:c0:b0:15:bd:1a:5f:75:3c:
                    fb:02:45:ab:1e:11:f6:09:f4:a5:7a:07:12:e0:20:
                    a0:e5:67:7e:d9:f5:ff:3d:f5:18:0a:d9:7e:b3:aa:
                    54:6b:89:19:e4:6a:70:80:ed:22:01:7f:fc:c9:aa:
                    ae:12:8f:a0:56:53:84:15:a6:b9:40:c1:27:83:07:
                    fa:c9:d7:35:86:1f:00:80:75:b1:d7:b0:6f:01:97:
                    d8:35:ba:9e:37:26:e3:56:51:ea:78:9f:43:56:0c:
                    b9:ac:13:fc:cf:a1:30:a1:29:f6:11:17:37:bf:90:
                    1e:84:f9:0e:ec:91:0a:d0:7c:ce:e4:5c:a7:13:44:
                    01:bf:d3:c3:c3:06:07:26:35:07:7e:d4:3a:33:a3:
                    7d:bd:ff:ed:b3:b1:a5:a9:a2:71:d5:aa:86:32:5d:
                    b7:19:e4:ed:0e:7d:f8:36:bb:3e:3f:c7:9d:83:9b:
                    61:16:28:93:9b:e7:50:6d:2d:51:7e:7a:6d:94:cf:
                    6b:b6:71:f8:de:bf:09:c1:00:4c:dc:b5:75:a0:9b:
                    3b:ed:bb:6d:6b:94:1c:34:f8:dd:77:1c:71:58:5a:
                    ad:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C0:D0:9D:2C:45:6F:17:1B:A6:F4:B6:0C:65:D4:60:81:4D:59:42
            X509v3 Authority Key Identifier:
                keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ysDQnSxFbxcbpvS2DGXUYIFNWUI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.98.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:8c:97:01:09:40:fb:d9:6b:a4:2c:09:1d:28:5a:85:16:4f:
         06:07:ac:60:2e:8f:4e:ae:7c:50:d5:63:16:68:e7:7f:9a:49:
         d8:b6:6c:14:ca:ee:2d:cf:fc:32:72:8e:13:89:5f:0a:d4:50:
         ba:8f:b7:dc:a5:d3:cd:c0:79:5b:d9:ee:81:64:45:e0:05:84:
         e4:98:fd:8d:b9:05:b4:73:62:bb:d9:48:d5:4c:25:53:2a:09:
         56:2a:e0:50:ca:c4:fd:40:c0:5e:bc:b6:c8:e7:b4:10:c5:ca:
         ff:0c:20:ba:f4:ca:ee:3d:5d:a3:7e:52:1b:c5:22:7d:8b:23:
         18:6c:3b:5c:39:54:e6:33:68:1e:a7:e2:aa:5a:ca:0c:8a:ef:
         cd:65:be:30:b3:ab:0b:d6:53:24:bb:e2:4d:b3:9b:84:41:ec:
         6e:ff:44:f1:2e:95:8e:b2:96:16:2c:25:3d:d5:a5:6c:44:75:
         47:2a:13:74:6e:22:92:48:1b:c3:80:8f:2b:78:9b:12:01:4d:
         65:c8:28:13:f4:20:3b:d1:ef:50:e8:c5:a1:bd:12:ed:4f:91:
         30:38:86:4e:88:cf:a3:3e:20:53:c4:df:de:26:f3:42:4e:70:
         9f:ce:c0:14:65:95:79:58:cd:bc:c6:fd:3f:75:bf:f3:46:5d:
         2f:0e:bd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----